Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          I4juVaSLan7baj+zX20rN3HtMMwvbgdyKwgLmZ/7RuY=
Subject key identifier:   D0:A1:BA:A4:8A:4E:F1:73:1E:7F:47:D2:36:19:4E:21:22:D6:B4:A1
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       026A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          0269
Signing time:             Fri 31 Jan 2025 02:31:10 +0000
Manifest this update:     Fri 31 Jan 2025 02:31:09 +0000
Manifest next update:     Sun 02 Feb 2025 02:31:09 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: AZfDLPXrbOM3YvRs/e5Vo6V6GQA7w7rXJANhhDJgZ2I=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Jan 31 02:31:09 2025 GMT
            Not After : Feb  2 02:31:09 2025 GMT
        Subject: CN=679c35ee-11b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:89:ee:83:0b:83:80:85:dc:72:77:ca:41:
                    65:5f:3c:6b:1c:8f:bd:c2:7a:42:8f:19:93:52:72:
                    8d:9d:51:70:ca:79:58:2a:ac:59:25:ee:48:15:3b:
                    6e:e4:f2:cb:c3:27:d1:d9:6b:4d:1f:1b:4c:ae:19:
                    8d:d7:44:6e:b9:34:f6:c8:98:fc:e0:18:16:58:90:
                    de:65:24:1b:33:94:b4:a9:85:96:c3:97:50:eb:da:
                    8d:19:78:20:ff:ad:6d:36:4c:45:19:a4:19:aa:94:
                    fe:df:f1:22:0c:94:ba:d1:42:7c:f4:4b:5f:91:54:
                    30:f0:71:e1:3e:ac:1d:ae:89:82:ec:11:a9:56:0c:
                    00:91:ef:ee:c5:30:f8:fb:75:61:e8:da:28:e6:ca:
                    22:96:c3:17:f4:92:81:24:60:1b:c8:bc:5c:8e:d1:
                    6a:59:0a:f5:30:3b:29:ab:1b:a7:55:6f:a7:0f:eb:
                    c8:99:9a:79:31:d6:00:78:6b:73:7f:8d:54:31:a1:
                    7d:93:23:7d:4f:f3:b1:5a:f7:3e:c6:da:83:c8:ef:
                    dd:69:ea:47:33:ca:d0:fe:a1:2e:74:da:de:42:5c:
                    ae:e6:77:43:6b:9c:b7:b5:8d:72:a5:2c:ee:9b:6e:
                    84:08:b3:f0:bc:b6:f0:70:fd:1d:17:2e:b2:77:d0:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A1:BA:A4:8A:4E:F1:73:1E:7F:47:D2:36:19:4E:21:22:D6:B4:A1
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:98:aa:88:af:02:58:de:6b:21:3f:68:06:75:17:33:c7:
         57:b9:a8:d7:b2:71:86:14:9f:ba:50:49:f9:f3:45:ed:6e:c8:
         2b:72:e8:2b:0e:94:bf:b1:d1:96:e2:52:ca:dd:1b:aa:ed:61:
         c9:05:fc:ca:01:ac:fe:76:67:22:99:88:be:00:3c:5a:8b:9b:
         35:5d:22:1e:cf:06:8f:c6:81:a9:d5:dc:d3:1e:61:b2:2d:39:
         0d:19:8f:4d:dc:b3:d4:0f:f8:bd:a5:fa:50:9e:96:5f:54:5a:
         ca:24:39:96:ec:58:c7:e3:67:22:75:aa:6f:92:89:97:4a:46:
         c2:41:4f:10:ec:18:d5:91:10:d3:4d:99:95:f8:e9:63:41:eb:
         92:3e:7c:db:6c:31:e5:8b:a7:3a:a1:89:87:53:1d:3b:89:70:
         14:c3:17:8b:49:f4:0f:52:9b:c0:24:d8:be:cd:ca:53:56:ec:
         b7:49:42:20:c5:6d:a5:16:ce:10:5f:1b:02:0d:82:4e:6c:7d:
         cc:61:9f:b8:b1:71:f2:93:19:0f:1a:fc:b0:eb:4d:0f:44:0c:
         22:43:d1:05:0f:97:c0:8d:76:94:9f:d5:14:80:18:a8:a0:91:
         80:66:eb:f5:ba:6d:d6:0c:d6:3c:60:15:5a:3d:5f:eb:f9:22:
         ec:ae:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:22 2025 by rpki-client